In message <p05200f09ba259bfcdf46@[66.93.41.195]>, Jan Steinman writes:
>>From: Winsor Crosby <wincros@xxxxxxxxxxxxx>
>>
>>One of the interesting new devices that is optional on the Canon
>>EOS-1D is a data verification device. The camera can be set to write
>>a code into the header of the digital file. The image file can then
>>be read by a device that will verify whether the image has been
>>changed at all even by one pixel.
>
>What's to keep some software from modifying or deleting the verifiction data?
Hmmm, maybe Canon uses some sort of PKI? Digital certificates? Yes,
would be PITA for widespread use, but it would be just the thing for
photojournalists and large news companies. The camera has it's own
digital certificate, it calculates the hash, signs it, embeds it in the
photo file. Photog sends the file to the editor. Editor checks it,
sees that it is right and ... It might not be just simple hash routine
that saves the hash together with the image. :-) That's why I'd like to
see some more information on the device. :-)
And yes, seeing that many companies in the InfoSec industry can't get
things right, what are the chances that someone that's not primarily in
the industry does? Huh? Huh? Soapbox. Off.
Saso
< This message was delivered via the Olympus Mailing List >
< For questions, mailto:owner-olympus@xxxxxxxxxxxxxxx >
< Web Page: http://Zuiko.sls.bc.ca/swright/olympuslist.html >
|